HP ProCurve 5300xl Series Management Manual page 383

Note: To enable traffic filtering with an ACL assigned to a VLAN such as
the one shown in this example, IP routing must be enabled on the switch.
Otherwise, no ACL filtering will occur.
Figure 9-12. Example of Configuring a Standard ACL To Deny Inbound Traffic from Specific IP Addresses
Access Control Lists (ACLs) for the Series 5300xl Switches
Configuring and Assigning an ACL
Show config lists any ACLs and ACL
assignments configured in the startup­
config.
ACL "60" is listed in the switch configuration.
ACL "60" is assigned to filter inbound traffic
on VLAN 20.
• Denies IP traffic from the
indicated IP address.
Since, for this example,
ACL 60 is a new list, this
command also creates the
ACL.
• Denies IP traffic from the
indicated IP address.
• Permits IP traffic from all
sources. (Traffic from the
IP sources in the first two
lines is already filtered and
dropped.) The deny any
with which the switch
implicitly concludes all
ACLs is preempted by this
line.
9-37